Topic181 problems· 1 reviewed

Observability Pipeline

181 incident problems about Observability Pipeline. Start with the reviewed ones.

All problems (181)

SECURITY-1551An Elastic detection rule is updated and one index set still misses alertsAlerts disappear only for one log family after detection rule updates.SecurityAdvanced12 minPro SECURITY-1599A CrowdSec parser correction lands and one scenario still missesOne CrowdSec scenario still misses after parser corrections.SecurityIntermediate8 minPro SECURITY-1589A CrowdSec parser fix lands and one scenario still never firesOne CrowdSec scenario still misses after parser fixes.SecurityIntermediate8 minPro NETWORK-1595A Palo Alto profile update lands and one rule still logs to the old serverOne firewall rule still logs to the old server after profile updates.NetworkAdvanced9 minPro SECURITY-1518A SIEM parser accepts the new firewall field and correlation still breaksThreat correlation breaks only for one firewall feed after a vendor format update.SecurityIntermediate9 minPro SECURITY-1528A SIEM parser accepts the new firewall field and correlation still breaksThreat correlation breaks only for one firewall feed after a format update.SecurityIntermediate9 minPro SECURITY-1508A SIEM parser accepts the new firewall field and threat correlation still breaksThreat correlation breaks only for one firewall feed after a vendor format update.SecurityIntermediate9 minPro SECURITY-1498A SIEM pipeline parses the new firewall field and threat correlation still breaksThreat correlation breaks only for one firewall feed after a vendor format update added a new zone field.SecurityIntermediate9 minPro NETWORK-1607An IPFIX collector migration is correct and one dashboard still decodes fields wrongOne dashboard still decodes fields wrong after an IPFIX collector migration.NetworkAdvanced9 minPro NETWORK-1601An NGINX proxy fix is correct and one backend still sees the wrong client chainOne backend still sees the wrong client chain after an NGINX proxy fix.NetworkAdvanced9 minPro NETWORK-1591An NGINX real_ip fix lands and one host still logs the old sourceOne host still logs the old source IP after a real_ip fix.NetworkAdvanced9 minPro K8S-1601A Cilium restore succeeds and one node still tags flows wrongOne node still tags flows wrong after a Cilium restore.KubernetesAdvanced10 minPro NETWORK-1605A Palo Alto forwarding profile clone is correct and one zone still exports the wrong logsOne zone still exports logs to the wrong collector after profile cleanup.NetworkAdvanced10 minPro NETWORK-1575A Palo Alto log forwarding profile updates and one rule still ships the old facilityOne firewall rule still forwards logs with the old facility after profile updates.NetworkAdvanced10 minPro K8S-1577A Prometheus remote-write queue drains and one shard still backpressuresOne remote-write shard continues to backpressure after tuning.KubernetesAdvanced10 minPro NETWORK-1578An Envoy cluster rename is applied and one xDS consumer still exports the old statsOne xDS consumer still exports stats under the old cluster name after a rename.NetworkAdvanced10 minPro NETWORK-1570An IDS mirror source is corrected and one sensor still sees the wrong VLANOne IDS sensor still sees the wrong VLAN after SPAN cleanup.NetworkAdvanced10 minPro NETWORK-1597An IPFIX collector fix lands and one process still decodes the old fieldOne process still decodes the old field after an IPFIX collector fix.NetworkAdvanced10 minPro NETWORK-1567An IPFIX collector upgrade finishes and one feed still decodes with the old field mapOne IPFIX feed is decoded wrong after collector upgrade.NetworkAdvanced10 minPro NETWORK-1587An IPFIX field map update lands and one collector still parses the old fieldOne collector still parses the old field after an IPFIX map update.NetworkAdvanced10 minPro